CVE-2014-9718: Debian Linux

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function's return value, which allows guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions.

Affected products

• Debian Debian Linux: version 8.0 only
• Qemu Qemu: version 1.0 only; version 1.0.1 only; version 1.1 only; version 1.4.1 only; version 1.4.2 only; version 1.5.0 only; …

Published 2015-04-21. Last modified 2026-06-17.